CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability-

CVE-2024-55099 - Vulnerabilidade de Injeção SQL no Online-Nurse-Hiring-System v1.0 Autor do Exploit: ugurkarakoc Página do Fornecedor https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql Link do Software https://phpgurukul.com/?sdmprocessdownload=1&downloadid=17826 Visão Geral O...

CVE-2026-78500

A blind server-side request forgery SSRF vulnerability WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...

CVE-2024-7928

CVE-2024-7928: FastAdmin V1.3.4.20220530 मनमाना फ़ाइल पठन भेद्यता CVEHunter टूल अन्य POC की तुलना में सटीकता और अतुल्यकालिक समवर्तीता के साथ CVE-2024-7928 के लिए FastAdmin इंस्टेंसेस का पता लगाने और DB विवरण प्राप्त करने हेतु शोषण करने वाला उपकरण है। स्थापना root@kitploit: git clone...

qlcoder

QLCoder Framework agentico per la sintesi di query CodeQL Sommario Panoramica Installazione Docker Consigliato Nativo Linux Utilizzo Avvio Rapido Strumenti di Sviluppo Esempi Ambiente dell'Articolo Contributi Team Citazione Progetti Affiliati Panoramica QLCoder è un framework per l'utilizzo di LL...

EUVD-2026-67328

A SQL injection vulnerability was found in YzmCMS 7.5. The issue occurs in the getarrchildid function within application/admin/controller/category.class.php, where the user-controlled parentid parameter is concatenated directly into a FINDINSET SQL clause without proper sanitization. This allows ...

CVE-2026-75417

A SQL injection vulnerability was found in YzmCMS 7.5. The issue occurs in the getarrchildid function within application/admin/controller/category.class.php, where the user-controlled parentid parameter is concatenated directly into a FINDINSET SQL clause without proper sanitization. This allows ...

brawl-public-game-001

BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...

VulnCheck KEV: CVE-2026-82078

An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can...

CVE-2025-46171

vBulletin 3.x.x - DoS tramite sovraccarico della Buddy List Riepilogo L'endpoint /misc.php?do=buddylist esegue un'unica grande query JOIN che recupera tutti gli amici insieme alle loro informazioni utente e di sessione per verificarne lo stato online. Poiché questa query elabora l'intera lista...

H2-database-CVE-2022-23221

H2 Database RCE CVE-2022-23221 whs41반고늘상@straightSang 1. Riepilogo Riferimento: https://nvd.nist.gov/vuln/detail/cve-2022-23221 H2 è un sistema di gestione di database relazionali che fornisce la funzionalità di compilare ed eseguire direttamente codice Java all'interno del motore SQL. Il driver...

CVE-2025-11077

CVE-2025-11077 - SQL Injection Autor: Byte Reaper Beschreibung Diese Schwachstelle ist eine Blind-SQL-Injection in der Datei addcontent.php des Online Learning Management Systems CVE-2025-11077, die es einem Angreifer ermöglicht, Datenbankinformationen durch das Senden präparierter POST-Anfragen ...

CVE-2025-10046

CVE-2025-10046 - ELEX WooCommerce Google Shopping Autor: Byte Reaper Beschreibung CVE-2025-10046 ist eine SQL-Injection-Schwachstelle im ELEX WooCommerce Google Shopping Product Feed Plugin für WordPress, Version 1.4.3 und früher. Das Problem befindet sich in der Datei...

CVE-2026-78500

WatchGuard Dimension contains a blind server-side request forgery (SSRF) vulnerability in the Database Server Test configuration. An authenticated privileged attacker can use this to enumerate exposed network services on adjacent network systems . The CVSS 4.0 base score is 5.1 (MEDIUM) , with an...

CVE-2026-78500 Dimension Blind SSRF via Database Test Connection Feature

A blind server-side request forgery SSRF vulnerability WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...

xerial__sqlite-jdbc_CVE-2023-32697_3-41-2-1

SQLite JDBC Treiber SQLite JDBC ist eine Bibliothek zum Zugreifen auf und Erstellen von SQLite-Datenbankdateien in Java. Unsere SQLiteJDBC-Bibliothek erfordert keine Konfiguration, da native Bibliotheken für gängige Betriebssysteme, einschließlich Windows, macOS, Linux usw., in einer einzigen...

CVE-2026-39492

CVE-2026-39492 — WP Maps Blind SQL Injection Scanner Pre-Auth Time-Based Blind SQLi via Backtick-Bypass → DB-Extraktion Übersicht CVE-2026-39492 ist eine kritische CVSS 9.3 nicht authentifizierte blinde SQL-Injection-Schwachstelle im WP Maps -Plugin wp-google-map-plugin in Versionen ≤ 4.9.1. Der...

vFeed

CONTROLLA LA NUOVA LIBRERIA https://github.com/vfeedio/pyvfeed vFeed Il Wrapper per il Database Correlato di Vulnerabilità e Threat Intelligence...

mimosa

Mimosa Beschreibung Systeme werden neu gestartet, Datenbanken werden gedumpt, früher hieß es SecureCoding, dann wurde es an Junioren übergeben und schließlich komplett neu geschrieben. Dies ist ein Open-Source-Kern; administrative Kontrollen sind ausgeschlossen. Funktionen Viele Challenges Verwei...

CVE-2023-34468-POC

CVE-2023-34468 — Apache NiFi 1.21.0 RCE PoC Esecuzione remota di codice tramite istruzione RUNSCRIPT del database H2 in Apache NiFi = 1.21.0 Vulnerabilità Apache NiFi include di default un JAR del database H2. Il controller service DBCPConnectionPool può essere configurato per utilizzare questo...

CVE-2025-14847

🛡️ CVE-2025-14847 - Strumento Facile per la Sicurezza di MongoDB 📥 Scarica Ora Download 📋 Panoramica CVE-2025-14847, noto anche come MongoBleed, è uno strumento di sicurezza progettato per identificare le vulnerabilità in MongoDB. Questa applicazione aiuta gli utenti a valutare efficacemente i...